Assign and Unassign Roles to Users

Regulate user access to organizations and projects.

Assign Roles to Users

Important: When assigning roles to users, follow the principle of least privilege and grant the minimum permissions required to carry out the given task.

To assign roles to a user:

1. Log in to the Identity & Access Management portal as an IAM Admin user.

2. Click Users.

3. Select an organization or a project:

   Click the Context Switcher drop-down list, select an organization or a project, then click Go.
   

4. Locate the user and click their user name, or hover over and select User Details to access the User Details page.

5. Click Assign Role.

6. From the Role drop-down list, select the category, then choose the role.

   Note: Role assignment is inherited by all the nodes within the selected organization or project scope.

   Tip: Click Add Another Role to assign additional roles.

7. Click Assign.

Unassign Roles from Users

To unassign roles from a user:

1. Log in to the Identity & Access Management portal as an IAM Admin user.

2. Click Users.

3. Select an organization or a project:

   Click the Context Switcher drop-down list, select an organization or a project, then click Go.
   

4. Locate the user and click their user name, or hover over and select User Details to access the User Details page.

5. On the Applied Roles tab, locate the role you want to remove, then hover over and select Remove Role.

6. Click Remove.